The organization implements controls to protect personally identifiable information (PII) used for research.
No STIG checks reference this CCI.